Category-Driven Risk Identification

Abstract

Determining risk associated with a product may comprise identifying a product to be supplied to an entity. A product category associated with the product that is one of a plurality of predetermined product categories is determined. A plurality of risk element associated with the product according to the product category is retrieved from a category standards database. A risk level associated with the product category for each of the plurality of risk elements is determined. An inherent risk associated with the product is calculated according to the risk level determined for each of the plurality of risk elements from the category standards database and independent of any vendor selected to supply product.

What is claimed is: 
     
         1 . A management server, comprising:
 a memory comprising rules for determining risk associated with a product; and   a processor communicatively coupled to the memory and operable to:
 identify the product to be supplied to an entity; 
 determine a product category associated with the product that is one of a plurality of predetermined product categories; 
 retrieve a plurality of risk elements associated with the product according to the product category from a category standards database; 
 determine a risk level associated with the product category for each of the plurality of risk elements; and 
 calculate an inherent risk associated with the product according to the risk level determined for each of the plurality of risk elements from the category standards database and independent of any vendor selected to supply product. 
   
     
     
         2 . The server of  claim 1 , wherein the calculated inherent risk is used in each of a plan phase, source phase, and manage phase of a vendor management system. 
     
     
         3 . The server of  claim 1 , wherein the processor is further operable to determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur prior to selection of a vendor to supply the product. 
     
     
         4 . The server of  claim 1 , wherein the processor is further operable to determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur after selection of a vendor to supply the product and prior to execution of a contract for supplying the product. 
     
     
         5 . The server of  claim 1 , wherein the processor is further operable to determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur after execution of a contract for supplying the product. 
     
     
         6 . The server of  claim 1 , wherein the processor is further operable to:
 determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product; and   incorporate the category-driven management action for the product into a vendor level quality plan associated with a vendor once the vendor is selected to supply the product.   
     
     
         7 . The server of  claim 1 , wherein the processor is further operable to:
 determine that a subcategory of the product category is associated with the product; and   determine additional risk elements associated with the subcategory.   
     
     
         8 . A method for determining risk associated with a product, comprising:
 identifying a product to be supplied to an entity;   determining, using a processor, a product category associated with the product that is one of a plurality of predetermined product categories;   retrieving a plurality of risk elements associated with the product according to the product category from a category standards database;   determining, using the processor, a risk level associated with the product category for each of the plurality of risk elements; and   calculating, using the processor, an inherent risk associated with the product according to the risk level determined for each of the plurality of risk elements from the category standards database and independent of any vendor selected to supply product.   
     
     
         9 . The method of  claim 8 , wherein the calculated inherent risk is used in each of a plan phase, source phase, and manage phase of a vendor management system. 
     
     
         10 . The method of  claim 8 , further comprising determining a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur prior to selection of a vendor to supply the product. 
     
     
         11 . The method of  claim 8 , further comprising determining a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur after selection of a vendor to supply the product and prior to execution of a contract for supplying the product. 
     
     
         12 . The method of  claim 8 , further comprising determining a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur after execution of a contract for supplying the product. 
     
     
         13 . The method of  claim 8 , further comprising:
 determining a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product; and   incorporating the category-driven management action for the product into a vendor level quality plan associated with a vendor once the vendor is selected to supply the product.   
     
     
         14 . The method of  claim 8 , further comprising:
 determining that a subcategory of the product category is associated with the product; and   determining additional risk elements associated with the subcategory.   
     
     
         15 . A non-transitory computer readable medium comprising logic, the logic when executed by a processor, operable to:
 identify a product to be supplied to an entity;   determine a product category associated with the product that is one of a plurality of predetermined product categories;   retrieve a plurality of risk elements associated with the product according to the product category from a category standards database;   determine a risk level associated with the product category for each of the plurality of risk elements; and   calculate an inherent risk associated with the product according to the risk level determined for each of the plurality of risk elements from the category standards database and independent of any vendor selected to supply product.   
     
     
         16 . The computer readable medium of  claim 15 , wherein the calculated inherent risk is used in each of a plan phase, source phase, and manage phase of a vendor management system. 
     
     
         17 . The computer readable medium of  claim 15 , wherein the logic is further operable to determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur prior to selection of a vendor to supply the product. 
     
     
         18 . The computer readable medium of  claim 15 , wherein the logic is further operable to determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur after selection of a vendor to supply the product and prior to execution of a contract for supplying the product. 
     
     
         19 . The computer readable medium of  claim 15 , wherein the logic is further operable to determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product, wherein the management action is specified to occur after execution of a contract for supplying the product. 
     
     
         20 . The computer readable medium of  claim 15 , wherein the logic is further operable to:
 determine a category-driven management action for the product according to the product category and independent of any vendor selected to supply the product; and   incorporate the category-driven management action for the product into a vendor level quality plan associated with a vendor once the vendor is selected to supply the product.